CVE-2022-1560

🗓️ 16 May 2022 14:31:15Reported by WPScanType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 74 Views🌐 WEB

The Amministrazione Aperta WordPress plugin before 3.8 has a Local File Inclusion issue

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2022-1560	16 May 202215:15	–	attackerkb
CNNVD	WordPress plugin Amministrazione Aperta 路径遍历漏洞	16 May 202200:00	–	cnnvd
CNVD	WordPress Amministrazione Apertas plugin file inclusion vulnerability	18 May 202200:00	–	cnvd
Cvelist	CVE-2022-1560 Amministrazione Aperta < 3.8 - Admin+ LFI	16 May 202214:31	–	cvelist
NVD	CVE-2022-1560	16 May 202215:15	–	nvd
Prion	Design/Logic Flaw	16 May 202215:15	–	prion
Positive Technologies	PT-2022-13960 · WordPress · Amministrazione Aperta	16 May 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-1560	22 May 202522:13	–	redhatcve
wpexploit	Amministrazione Aperta < 3.8 - Admin+ LFI	23 Mar 202200:00	–	wpexploit
WPVulnDB	Amministrazione Aperta < 3.8 - Admin+ LFI	23 Mar 202200:00	–	wpvulndb

NVD

Vulners

Node

amministrazione_aperta_project amministrazione_apertaRange<3.8wordpress

[
  {
    "product": "Amministrazione Aperta",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "3.8",
        "status": "affected",
        "version": "3.8",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
wpscan	www.wpscan.com/vulnerability/5c5fbbea-92d2-46bb-9a70-75155fffb6de

Parameter	Position	Path	Description	CWE
open	query param	wp-admin/admin.php?page=impostazioni-wpgov&open=../../index.php	Local File Inclusion via open parameter in WordPress plugin; unsafely includes user-controlled path.	CWE-22